Email Domain Authentication Checker (SPF, DKIM, DMARC)
Pricing
Pay per event
Go to Apify Store

Email Domain Authentication Checker (SPF, DKIM, DMARC)
Audit any list of domains for email deliverability: SPF (with DNS lookup count), DKIM keys on 45 common selectors, DMARC policy and reporting, MX, BIMI, MTA-STS and TLS-RPT. Each domain gets a 0-100 score, a grade and plain-English fixes.
Pricing
Pay per event
Rating
0.0
(0)
Developer
Ian McCann
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
10 days ago
Last modified
Categories
Security
Limited permissionsShare
What does Email Domain Authentication Checker do?
It checks the DNS records that decide whether a domain's email lands in the inbox, for any number of domains at once:
| Check | What it looks at |
|---|---|
| SPF | Record present, duplicates, ~all / -all ending, and the 10 DNS lookup limit (counted through nested includes) |
| DKIM | Public keys on about 45 common selectors (Google Workspace, Microsoft 365, SendGrid, Mailchimp, Klaviyo, HubSpot, Zoho, Amazon SES and more), plus your own selectors |
| DMARC | Record present, policy (none / quarantine / reject), subdomain policy, pct, and rua reporting addresses |
| MX | Whether the domain can receive mail |
| BIMI, MTA-STS, TLS-RPT | Extra trust and transport security records |
Every domain gets a 0-100 score, a grade from A to F, and a list of issues written as fixes.
Who is it for?
- Cold email and outbound teams checking their own sending domains and inboxes before a campaign
- Agencies and MSPs auditing client domains in bulk, and finding prospects who need help (for example, no DMARC)
- Email marketers preparing for Gmail and Yahoo sender requirements (SPF or DKIM plus DMARC)
- Security teams spotting domains that can be spoofed
How to use it
- Enter domains, one per line. Website URLs and email addresses also work.
- If you know your DKIM selector, add it under Extra DKIM selectors.
- Run and sort by
score.
Input example
{ "domains": ["apify.com", "wordpress.org", "example.com"] }
Output example (shortened)
{"domain": "example-shop.com","grade": "C","score": 65,"issues": ["DMARC policy is p=none: spoofed mail is still delivered. Move to quarantine or reject once reports look clean.","SPF needs 12 DNS lookups (limit is 10): SPF will fail (permerror)."],"spf": { "found": true, "allQualifier": "~all", "dnsLookups": 12, "multipleRecords": false },"dmarc": { "found": true, "policy": "none", "reportingAddresses": ["dmarc@example-shop.com"] },"dkim": { "checked": true, "selectorsFound": ["google", "k1"] }}
How much does it cost?
| Event | Price |
|---|---|
| Actor start | $0.001 per run |
| Domain checked | $0.003 per domain |
1,000 domains cost about $3.
Notes
- Only public DNS records are read. No email is sent.
- DKIM keys can only be found on selectors that are tried. If your provider uses a custom selector, add it to the input; otherwise a missing DKIM result means "not found on common selectors", not "definitely missing".
- Provider names are used only to describe results; this tool is not affiliated with any provider.